
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
File: fOaNr18IlFbA4dAiRTk1Maxbj8s.mft (raw, json)
Hash identifier: kfYarbswesr1XssVRoJUKW0mxl2u92h6Oxc4iG7seMg=
Subject key identifier: 4F:05:C7:0E:98:A9:F0:45:EB:2F:02:53:48:F1:CB:F2:C7:F0:9C:EC
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 0196729D9476420E3923BEA5D9379C9E8F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
Manifest number: 155B
Signing time: Sat 26 Apr 2025 15:00:51 +0000
Manifest this update: Sat 26 Apr 2025 15:00:51 +0000
Manifest next update: Sun 27 Apr 2025 15:00:51 +0000
Files and hashes: 1: Gy2CW0Td6J-rxJGzgVfuTvJN2Gc.roa (hash: /b5aRnHH3wnxArlR5kFKg9d+odQfqWviv5wIlL2Kwi4=)
2: LuPOINyFzX9xpTNNLpVMhkc3RGs.roa (hash: CVfqSYlx9earVowtUFnY2vr9Ypav6ng0WSshJUDgEG0=)
3: W0y-zOIi1-67OubMNwYseTI2YtY.roa (hash: o3q76eBrYuH9u8MB8bIslqFqm+BZyQwFbiFNU/6C+2A=)
4: _98jj7rw3GzhqfBubRrswa8FaIM.roa (hash: 33HpVVlfY3jl30lKiRH+eSoeIY19MzDqa9h48Wn+xoY=)
5: fOaNr18IlFbA4dAiRTk1Maxbj8s.crl (hash: oxjNfHL4AYDvzuRswktGmT7oyw0zUPAsZeM2SJIMxxM=)
6: k0BbLfW1pH9JeekCNksDJuhLIU8.roa (hash: I7bsd1t0LSwpkWSpjQNC0fheclbb8PLVx1rVQYbgTzo=)
7: nh1DAdGlkCnqMoRCOw5nSf1eUrE.roa (hash: 6CL3sDa/YSgMH6T3lPf7wvZWcq37OdDdy32xWrUSt1w=)
8: zavgzNemz0PuzWJnrL1r_g_mOeM.roa (hash: GhTFQ6FabhR00Vo0TF/PdK9RjLjp+971izL/zbfm494=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:94:76:42:0e:39:23:be:a5:d9:37:9c:9e:8f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Apr 26 15:00:51 2025 GMT
Not After : Apr 27 15:00:51 2025 GMT
Subject: CN=4f05c70e98a9f045eb2f025348f1cbf2c7f09cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:f0:0a:17:69:59:8c:ac:f2:d5:aa:13:dc:
00:1c:2c:ed:3e:78:49:af:e4:cd:1f:cb:78:12:98:
88:38:69:0c:8c:07:36:f3:ec:eb:bc:a2:17:a8:fd:
70:db:0c:d9:bc:cc:2a:ea:41:a7:9b:fc:48:ad:27:
85:ed:e8:97:b4:e0:c5:50:8d:e4:a7:fa:b3:fd:d2:
e1:6a:41:f4:1e:78:08:16:36:7a:58:8b:3b:c7:71:
2f:d7:8c:21:14:c0:58:a6:e8:79:05:cc:d0:b7:41:
cc:0b:34:4f:bd:9f:0d:a0:5e:dd:cd:a9:9c:a4:f2:
34:9f:48:a0:c5:a6:45:9c:05:28:4e:62:97:00:52:
5a:3a:d2:ae:17:a9:eb:ad:33:c9:b4:72:ce:ef:fe:
63:77:98:cf:4e:af:36:be:51:93:5a:82:f3:3f:ff:
c8:4d:f6:af:ff:60:a4:be:a9:8c:03:45:7c:cb:7a:
c1:d2:95:70:04:ae:06:ac:32:40:f6:fa:c0:87:b6:
90:29:e8:28:f6:54:48:75:e5:49:86:4e:75:05:3b:
ed:e1:90:92:68:77:08:25:e0:99:98:2c:4d:62:b2:
09:bc:7f:5a:df:81:44:bb:89:af:af:58:c0:29:8d:
9d:37:08:cc:48:f7:85:1a:6e:e8:16:a0:c3:36:3b:
c8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:05:C7:0E:98:A9:F0:45:EB:2F:02:53:48:F1:CB:F2:C7:F0:9C:EC
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:cc:8d:0b:d7:ae:7c:18:3e:38:7f:8a:b5:3f:31:96:02:77:
ac:46:8e:f8:b5:a0:2d:a9:34:78:e8:6e:ac:f2:a9:8f:62:a3:
bf:ee:a3:1d:25:30:e1:45:38:da:7a:7c:9b:08:7c:67:21:c3:
6d:0e:19:3e:d3:52:d9:a4:83:ec:12:e3:55:80:57:0b:b9:f1:
e7:7c:42:a7:41:1c:fc:f8:13:03:49:e7:ea:5e:2e:76:b3:3d:
63:c8:cc:ef:ec:73:c5:7c:42:a8:a1:ec:61:a4:8e:26:03:31:
9b:9e:2d:00:c8:f9:ca:84:e0:9a:e0:35:09:90:28:ab:e9:7a:
6f:11:a8:bd:17:9e:4b:6b:f5:0d:d8:cd:0e:48:ce:e5:f5:60:
90:00:36:e2:6a:72:0f:87:0c:45:79:5d:b5:6c:49:cb:42:82:
21:b9:c5:d4:d4:4a:7d:0c:e2:b8:07:69:7b:ac:e0:49:9a:a4:
6c:6a:53:6b:c1:7b:c1:8f:56:7e:97:95:33:04:cc:5c:ff:38:
f0:2a:70:8a:21:bc:0e:05:cf:e6:81:78:c4:8c:35:7f:10:7d:
5e:d3:85:d2:a4:60:1a:da:24:6f:ea:65:71:fd:ef:c7:c2:f2:
2c:6e:10:e7:6f:08:5e:78:8f:e8:7b:f6:ff:5e:3a:ff:4f:12:
84:85:b5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:07:19 2025 by rpki-client